Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4C017AA9DA311EF86A1EDA4762E951A.roa
File: B4C017AA9DA311EF86A1EDA4762E951A.roa (raw, json)
Hash identifier: 0I8k2bWdjUY/iHjv2YVkaYpcVR9F96ruDiOIHDO5h5M=
Subject key identifier: E7:6B:46:9E:2D:73:71:48:70:0F:F7:7A:07:A7:8D:58:51:5D:A9:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0109C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4C017AA9DA311EF86A1EDA4762E951A.roa
Signing time: Fri 08 Nov 2024 07:33:11 +0000
ROA not before: Fri 08 Nov 2024 07:33:07 +0000
ROA not after: Sat 30 Nov 2024 07:33:07 +0000
asID: 18229
IP address blocks: 154.210.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68038 (0x109c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 8 07:33:07 2024 GMT
Not After : Nov 30 07:33:07 2024 GMT
Subject: CN=672dbeb7-aab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:6c:68:89:67:1f:21:8f:b7:c9:8a:85:3a:
e7:b3:92:67:5e:e9:30:1f:9e:49:6d:9e:0f:a8:fa:
79:44:12:58:3f:08:01:71:ca:40:04:9d:0c:f9:52:
ab:9d:8f:84:bf:19:27:27:c9:e0:32:37:92:cd:42:
fe:e0:0c:fe:4e:f9:09:b4:c1:85:31:15:06:61:9a:
4e:38:6a:ef:21:af:d2:26:8f:3c:79:33:23:41:b8:
77:c7:c3:5e:ac:d2:7b:61:d9:aa:da:77:13:ed:44:
b2:ea:4f:b2:cb:1e:c0:11:7f:10:88:43:7b:c6:d3:
2f:6e:d9:6c:d6:eb:69:db:64:2a:24:0b:22:c6:ef:
3b:01:a5:1d:ab:81:64:e8:fa:3a:99:cb:1d:e0:5b:
3f:bb:60:d5:cd:9b:f0:47:43:47:b3:ed:26:3c:50:
7f:b4:bf:1d:b9:c1:fb:c5:d4:43:cc:5d:8e:bd:c0:
65:3b:f2:48:b8:e9:a3:31:4e:1d:80:37:d4:8a:bd:
06:9e:d2:ba:00:ef:33:9e:19:b5:9c:63:bf:96:de:
1d:72:b3:3c:49:42:bd:a8:b2:3f:bb:00:12:2c:21:
de:93:91:b0:18:88:db:ca:92:40:4d:12:e6:df:e6:
ee:ec:27:4a:46:ac:f0:76:e5:43:51:62:54:e8:7b:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6B:46:9E:2D:73:71:48:70:0F:F7:7A:07:A7:8D:58:51:5D:A9:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4C017AA9DA311EF86A1EDA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.208.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:f9:24:98:13:c7:97:52:45:21:84:5c:d7:cc:ad:53:be:d9:
ce:2d:98:b7:46:a5:4d:58:67:e8:ac:df:32:ae:10:18:64:54:
34:31:0d:d2:5a:af:b9:07:78:a1:d7:26:12:83:8d:1b:38:f5:
9e:74:65:52:0a:75:90:c0:75:d6:4b:eb:2f:82:4c:07:a8:55:
2b:6c:0b:c8:b5:28:2e:ac:dc:2f:cc:e3:3d:11:87:4b:c5:5c:
fa:34:f2:dc:49:12:33:61:56:99:48:34:c8:32:a6:9c:70:c0:
2a:1c:d6:ec:64:35:50:7a:5e:9b:5d:8c:9d:61:10:2c:93:a4:
5b:16:46:46:c9:44:e5:8f:1a:48:af:e1:9f:34:f5:ca:07:01:
41:80:61:1a:cd:fe:6e:19:2b:2f:74:13:a5:8d:de:11:51:03:
21:1b:2d:95:73:5c:57:3c:fb:9b:23:37:f0:21:9b:9f:c7:78:
0d:03:25:95:2c:1e:f1:dc:de:60:0b:f3:a3:34:e0:a7:b6:bb:
2f:69:ea:3a:f0:d5:77:f5:77:e8:19:1d:47:89:61:29:9d:29:
b9:69:76:c7:0b:22:74:7a:1f:86:eb:9b:cb:3e:94:8d:20:00:
b1:85:db:74:f2:d9:20:57:1c:e4:fd:ac:87:87:91:f4:e5:e7:
a1:04:1c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:23 2024 by rpki-client on console-ams.rpki-client.org